The Map-and-Encap Locator/Identifier Separation Paradigm : A Security Analysis

Internet lacks of strong security mechanisms, opening the way to a plethora of different manners in which integrity and availability can be compromised by malicious activities. Furthermore, the trend shows an increase of security threats, at least in the foreseeable future. Despite such situation, new proposals for Future Internet architectures mostly aiming at solving scalability issues do rather neglect security aspects. Among candidate Future Internet architectures, the ones based on the Locator/Identifier separation paradigm has been largely explored, but security had no major role in these research activities. We present a security threats analysis of such approach using the Locator/Identifier Separation Protocol (LISP) as a running example. The chapter does not overview the merits of the Locator/Identifier separation paradigm. Rather, the aim is to provide a thorough analysis of the security aspects, assessing the security level of the architecture and providing recommendations on possible practices to improve it